Application Security Engineer: Secrets, Vaults & Secure SDLC

Manulife; Quezon City; Hybrid; PHP 1,400,000 - 2,000,000; Full time

Benefits offered by this job

Hybrid work arrangement

Global team collaboration

Job summary

Manulife seeks an Applications Security Engineer to join the Global Cybersecurity Services (GCS) – Application Security Rapid Lab Team in Metro Manila. The role focuses on remediation of hard-coded secrets and secure software development across global projects.

You will work with Azure Key Vault and HashiCorp Vault, design secure backend services, and automate remediation within CI/CD pipelines. Hybrid work and strong communication are essential.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering, Information Technology, Cybersecurity, or related field.
• Minimum of five years of software engineering experience with secure application development and remediation.
• Experience developing backend applications, APIs, and automation utilities.
• Hands-on Secure SDLC and secure coding practices across design to maintenance.
• Experience triaging findings from SAST, DAST, SCA, secrets scanning, pentesting and reviews.
• Knowledge of secrets management and integration with enterprise platforms.
• Strong understanding of application security, OWASP Top 10, API security, architecture, and patterns.
• Experience with GitHub, GitHub Actions, GitGuardian, Snyk, and CI/CD platforms.

Responsibilities

• Assess applications for hard-coded secrets and configuration risks; implement secure migrations using Azure Key Vault or HashiCorp Vault.
• Design, develop, and maintain secure backend services and APIs using Java, Python, C#, or equivalent.
• Contribute to automated remediation capabilities and integrate security into CI/CD pipelines.
• Analyze findings from security tests and prioritize risk-based remediation.
• Participate in architecture reviews and promote secure patterns.
• Communicate risks, remediation plans, and guidance to technical and non-technical stakeholders.

Skills

Java

Python

C#

Secure SDLC

Secrets management

CI/CD

GitHub Actions

Snyk

GitGuardian

OWASP Top 10

Azure Key Vault

HashiCorp Vault

Education

Bachelor’s degree in CS/SE/Engineering

Tools

GitHub

HashiCorp Vault

Azure Key Vault

CI/CD pipelines

Job description

Manulife seeks an Applications Security Engineer to join the Global Cybersecurity Services (GCS) – Application Security Rapid Lab Team in Metro Manila. The role focuses on remediation of hard-coded secrets and secure software development across global projects.

You will work with Azure Key Vault and HashiCorp Vault, design secure backend services, and automate remediation within CI/CD pipelines. Hybrid work and strong communication are essential.